Agent OS · Component · mcp-tool-serving-runtime
MCP tool serving, schema dispatch and session transport
What it does
Serve MCP tool schemas/results with authorization and audit. Variants offer stdio or authenticated remote HTTP sessions, expiration and next actions. Domain tool implementations remain separate.
Core pattern
Authorized tool catalog serving + structured results
- Input
- Transport selection, tool registry, request arguments and scoped principal
- Output
- Tool catalog, structured results, sessions and safe protocol errors
Key parameters
| Name | Type | Default | Values |
|---|---|---|---|
| operation | string | serve | serve · list_tools · call_tool · close_session |
| transport | string | — | stdio · streamable_http |
| base_url | — | — | — |
| request_body | — | — | — |
| scope | — | — | — |
Maturity and limits
Source inspected statically; tests and external integrations were not executed.
Remote endpoints need authenticated per-session isolation; stdio configuration is not equivalent to remote authentication. Do not expose arbitrary provider operations without scope enforcement.
3 sentences citing source paths or vendor names omitted for publication.
Used in pipelines
Industry tags
- Travel & hotelsSource-supported industry
For work involving destinations, room rates and bookings, use authorized tool catalog serving followed by structured results.
- Business & general servicesTransferable use
For service integration for an internal knowledge assistant, use authorized tool catalog serving followed by structured results.
Skills pack
Contract scaffold and deterministic mock
Download · 13KBSHA-256 f1ba498ac3b8ab6b7c0c57e69abaf7b9b723edce879a4f2d0434841ffef474b4
Related components
-
Signed plugin registry and trusted installation
Signed extension registry + installation verification and revocation
Working 1 pipeline -
Scoped browser automation and research sessions
Bounded browser scope + page action evidence
Working 1 pipeline -
External connector OAuth, PKCE and encrypted session lifecycle
Scoped connection consent + credential refresh and revocation
Working 1 pipeline -
Dependency license policy and metadata audit
Dependency metadata comparison + license rule review
Working 1 pipeline